极客大挑战2019Havefun1
Q7nl1s admin

[极客大挑战 2019]Havefun 1

进入靶机打开开发者模式

1

发现如下代码

1
2
3
4
5
$cat=$_GET['cat'];
echo $cat;
if($cat=='dog'){
echo 'Syc{cat_cat_cat_cat}';
}

直接提交flag等于Syc{cat_cat_cat_cat}发现不对,根据代码提示构造payload:?cat=dog

2

得到flag

 Comments
Comment plugin failed to load
Loading comment plugin
Powered by Hexo & Theme Keep
Unique Visitor Page View